Privacy Notice
Last updated: 20 June 2026
TongShuToday ("we", "us", or "our") operates the website tongshutoday.com and its associated services. We are committed to protecting your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010). This Privacy Notice explains what information we collect, how we use it, who we share it with, and your rights regarding your data.
By accessing or using TongShuToday, you acknowledge that you have read and understood this Privacy Notice. If you do not agree with our practices, please do not use our services.
1. Data We Collect
Account Information
When you create a TongShuToday account, we collect your email address and, optionally, your birth date, birth time, and gender. This information is used to generate personalised almanac readings based on BaZi (Four Pillars of Destiny) calculations.
Usage Data
We automatically collect certain information when you visit our site, including the pages you view, the time and date of your visit, referring URLs, and general interaction patterns. This helps us understand how visitors use TongShuToday so we can improve the experience.
Device and Technical Information
We may collect information about the device and browser you use to access our site, including your device type, operating system, browser type and version, screen resolution, and preferred language settings. This data is collected in aggregate and is not used to identify you personally.
2. How We Use Your Data
We use the information we collect to:
- Provide, maintain, and improve the TongShuToday service, including personalised almanac readings and daily scoring
- Authenticate your identity and manage your account securely
- Analyse usage patterns to improve site performance, content relevance, and user experience
- Send service-related communications, such as welcome emails, account notifications, and important updates about our terms or policies
- Process payments and manage subscriptions (when applicable)
- Detect, prevent, and address technical issues or security threats
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
3. Cookies and Analytics
TongShuToday uses cookies and similar technologies to operate the site and understand how visitors interact with it.
Essential Cookies
These cookies are necessary for the website to function properly. They enable core features such as authentication, session management, and security. You cannot opt out of essential cookies as the site will not work correctly without them.
Google Analytics (GA4)
We use Google Analytics 4 on public (logged-out) pages to collect anonymous usage statistics, such as page views, session duration, and traffic sources. Google Analytics uses cookies to distinguish unique users and sessions. No analytics scripts run on authenticated (logged-in) pages. The data collected is aggregated and does not personally identify you.
You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, or by adjusting your browser's cookie settings to block third-party cookies.
4. Third-Party Services
We use the following third-party services to operate TongShuToday. Each provider processes data in accordance with their own privacy policies:
Supabase (Authentication and Database)
We use Supabase to manage user authentication and store account data (email, profile information, and BaZi birth details). Supabase processes your data securely and stores it in managed PostgreSQL databases. For details, refer to Supabase's Privacy Policy.
Cloudflare (Hosting and CDN)
Our website is hosted on Cloudflare Workers and served through Cloudflare's content delivery network. Cloudflare may process your IP address and request metadata for the purpose of delivering content, providing DDoS protection, and ensuring site performance. Refer to Cloudflare's Privacy Policy.
Stripe (Payment Processing)
If you purchase a paid subscription, your payment is processed by Stripe. We do not store your credit card number or full payment details. Stripe collects and processes payment information in accordance with Stripe's Privacy Policy. We receive only a confirmation of payment status and a truncated card identifier for your records.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will remove your personal data from our active databases within 30 days, except where retention is required by law or for legitimate purposes such as resolving disputes or enforcing our agreements.
Aggregated, anonymised data that does not identify you personally may be retained indefinitely for analytical and statistical purposes.
6. Your Rights Under PDPA 2010
Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:
- Right of Access: You may request a copy of the personal data we hold about you.
- Right of Correction: You may request that we correct any inaccurate or incomplete personal data.
- Right of Deletion: You may request deletion of your account and associated personal data. You can do this through your account settings or by contacting us directly.
- Right to Withdraw Consent: You may withdraw your consent to the processing of your personal data at any time. Please note that withdrawing consent may affect your ability to use certain features of our service.
To exercise any of these rights, please contact us at the email address listed below. We will respond to your request within a reasonable timeframe, and no later than 21 days as required by the PDPA.
7. Children's Privacy
TongShuToday is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will take steps to remove that information from our systems.
8. International Data Transfers
TongShuToday is operated from Malaysia. However, the third-party services we use (including Supabase, Cloudflare, Stripe, and Google Analytics) may process and store your data on servers located outside of Malaysia. By using our service, you consent to the transfer of your data to countries that may have different data protection standards than Malaysia. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Notice regardless of where it is processed.
9. Changes to This Notice
We may update this Privacy Notice from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Your continued use of TongShuToday after any changes constitutes your acceptance of the updated notice.
10. Contact Us
If you have any questions about this Privacy Notice, wish to exercise your data rights, or have concerns about how your information is handled, please contact us at: